Fine grain rights management of streaming content

ABSTRACT

The present invention provides methods, apparatuses, and systems for delivering protected streaming content to a receiving device. In an aspect of the present invention, a broadcaster provides streaming content. To ensure viewers are properly authorized, the streaming content is encrypted with a traffic key. The traffic key is provided to the users via a key stream message, which is encrypted with a service key. The user obtains at least one rights object from a rights issuers and the at least one rights object includes the service key so that the streaming content may be used. The at least one rights object also contains information regarding usage rights that may be configured by the rights issuer so that, depending on the user and/or the receiving device, different rights may be available. The key stream message may include a program category variable value that indicates the type of content and in conjunction with the rights object, determines what usage rights exist for the streaming content.

FIELD OF THE INVENTION

This invention relates to delivering protected multi-media content. Inparticular, the invention provides apparatuses and methods for use inproviding improved control over user rights to portions of the protectedcontent.

BACKGROUND OF THE INVENTION

Video streaming, data streaming, and broadband digital broadcastprogramming are increasing in popularity in wireless networkapplications, e.g., Internet Protocol (IP) multicast services. Tosupport these wireless applications, wireless broadcast systems transmitdata content that support data services to many wireless terminalssimultaneously. Digital media content or other data is broadcasted usingvarious application protocols, transport protocols and networkprotocols. For example, a broadcast system provides IP data broadcastwhere audio-visual service is transmitted so that MPEG4-AVC video,MPEG4-AAC audio and auxiliary data components are packetized andencapsulated to RTP and/or ALC. The packets are subsequently formattedto UDP and IP and transmitted over MPE in MPEG2-TS (for example DVB-H).In a packet-switched domain, the concept of a multi-media session mayrequire that one or more session components (audio, video and auxiliarydata in above case) are logically bound together. The portions of themulti-media session are sent between a common start time and end time.However, with a broadcast environment all receivers that are able toreceive the broadcast signal can receive the data carried by thebroadcast signal. It is important that the content seller limits accessto multi-media content so that only entitled receivers can present themulti-media content to users.

Digital Rights Management (DRM) systems, like Open Mobile Alliance (OMA)DRM system, are being used for selling access to discrete files, likeOMA DRM Digital Content Files (DCF). As one possible solution, a device(as instructed by its human user) from a Content Provider obtains theDCF (e.g. an MP3 music file), which is encrypted by a content key. Thedevice separately obtains (i.e. purchases) from a Rights Issuer (RI) aRights Object (RO) that may include (among other things) two parts: thecontent key for decrypting the DCF, and usage rights for the DCF. Usagerights control the way in which the device (and thus its human user) mayuse the decrypted DCF content; for instance, time limits for using thecontent, whether the content may be copied, etcetera. Different RIs maysell ROs for the same DCF at different prices and with different usagerights.

Often, e.g. in the case of OMA DRM, usage rights are expressed in aRights Expression Language (REL) which may contain conditionality basedon variables like days of week, time of day, period of days, etc. . . .For example, it may be stated that a particular usage right extends fora period of time. Examples of REL include Open Digital Rights Language(ODRL) and eXtensible rights Markup Language (XrML).

Recently, DRM systems are being deployed for selling streaming services,too, in addition to discrete DCF files. A special case of such streamingservices is true radio broadcast streaming services (broadcast serviceshereinafter), where multiple devices receive the same broadcast stream.For instance OMA DRM has been suggested for selling and purchasing IPdatacast (IPDC) services, and the solution is being standardized by theDigital Video Broadcasting (DVB) organization, in order to (among otherthings) support handheld television receivers on top of DVB-H (handheld)radio broadcast technology.

Typical organizational roles in broadcast services include: 1) abroadcaster who obtains the streaming content from content providers andbroadcasts it encrypted over the radio path, and 2) multiple RIs, whosell ROs for decrypting the content and setting the usage rights for itin the devices receiving the broadcast. The ROs may be delivered overthe same broadcast radio path as the encrypted content itself, or viaseparate interaction channels such as cellular data carriers (e.g. GSMGPRS, General Packet Radio Service).

In such a scenario, it is typically not feasible for the key in each ROto decrypt the streaming content directly, since the streaming contentis continuous (unlike discrete DCF files). One known technique ofcontent decryption is a key hierarchy such as is used in DVB conditionalaccess. Broadcaster sends sequences of streaming content each encryptedby a traffic key (TK), periodically changing the traffic key. At leastwhenever the traffic key changes, a Key Stream Message (KSM) is sent,containing the traffic key encrypted by a service key (SK). The ROscontain the service key. Therefore, receiving devices may use theservice key in the ROs to decrypt the traffic keys in the KSMs. Thereceiving devices may then use the traffic keys to decrypt the streamingcontent. In practice, the KSMs must be broadcast very frequently so asto enable quick “channel switch” from one service to another.

The service key also changes periodically, although the frequency ofchange is typically much lower. A new service key is then required forthe device to continue decrypt the streaming content. Therefore, a newRO with the new service key may be obtained by devices to replace oldones. Accordingly, ROs have a certain validity period, which equals thetime during which the service key can be used to decrypt the traffickeys so as to decrypt the streaming content.

As specified above, a RO for a broadcast service serves to decrypt andmake accessible streaming content, for the validity period of the RO.Like in the DCF case, the RO can also be used to state usage rightsexpressed in REL for the same validity period. As an example, considerthe DVB-H based handheld television broadcast service. Typically devicesare allowed to render on a display (so that a human user may view) thetelevision service, such as a program on a channel, as it is received.Usage rights may state what the device/user may do with the streamingcontent, which may be the television service. For example, the usagerights may provide that the content may be recorded, may be played backat a later time, may be copied to another device, may only be viewed orwhatever rights are desired to be provided.

While this methodology provides a certain level of functionality, thereis a problem. Each RO can only state one set of usage rights for thevalidity period. This level of control may be insufficient. For example,there may be different types of television programs in a handheldtelevision broadcast service that the RIs may wish to provide differentlevels of control regarding usage. The RIs may wish to allow a liberal“do anything” usage rights for certain types or portions of content suchnews, advertisements or quizzes but restrict usage rights for othertypes or portions of content such as premium sporting events or featuremovies. Thus, while ROs with relatively long validity periods are finefor streaming content access (i.e. decryption), it would be useful toprovide a more fine grained means of providing usage rights withincreased frequency and/or precision within the validity period of theRO so that the usage of the type or portion of the content is inaccordance with the usage rights intended to be granted for the type orportion of content.

Furthermore, rights to certain content may vary depending on the time ofday or the day of the week. In addition, a user may have differentrights for different portions of the content. For example, in order toenhance revenue collections, a user is often permitted to access premiummulti-media services only if the user subscribes to the service ororders the service (e.g., pay per view). However, the content may alsobe separated into time periods. Thus, for example, a user may decide tosubscribe to a weekend edition rather than a full week subscription. TheRIs may wish to allow some of the content available in the weekendedition subscription to be saved and forwarded freely to others whilelimiting other portions of the content to a single use or to a morecontrolled distribution set.

BRIEF SUMMARY OF THE INVENTION

With an aspect of the invention, a selector consisting of a few bits,transmitted frequently, can select the rights for a particular portionof content from a set of rights previously acquired and contained withinone or more ROs. As the selector is relatively small, frequenttransmission of the selector has little impact on the availablebandwidth. The one or more ROs, which change much less frequently, canprovide the details of the rights, therefore resulting in bandwidthsavings in the broadcast channel. Thus, the one or more RO can stillutilize the full richness of the REL to define what the rights are foreach portion of the content.

Another aspect of the present invention provides methods, apparatuses,and systems for delivering protected multi-media content to a receivingdevice. Portions of protected multi-media content and associated keyinformation are inserted in a same time slice burst. Consequently, keyinformation may be frequently changed while maintaining synchronizationwith the multi-media content. In one embodiment of the invention, timeslice bursts are sent from a transmitting apparatus to a receivingdevice by a communications system that includes a DVB-H system, a DVB-Tsystem, an ATSC system, and an ISDB-T system. The KSMs, which are sentvery frequently, each contain a small amount of program categoryinformation which translates into a REL variable and thereby selectsconditional usage rights from the ROs of all RIs, or (as anotherimplementation) from the RO of each RI individually. In an embodiment,the selection may be television program specific.

With another aspect of the invention, the program category informationsent in the KSM could be used to select one of a set of complete ROs, orpossibly one of several child ROs related to the same parent RO.

BRIEF DESCRIPTION OF THE DRAWINGS

A more complete understanding of the present invention and theadvantages thereof may be acquired by referring to the followingdescription in consideration of the accompanying drawings, in which likereference numbers indicate like features and wherein:

FIG. 1 shows transmission of Internet Protocol (IP) services utilizingtime slice transmission in accordance with an embodiment of theinvention;

FIG. 2 shows a protocol stack that supports transmission of multi-mediadata in accordance with an embodiment of the invention;

FIG. 3 shows a component configuration for a multi-media sessionaccording to an embodiment of the invention;

FIG. 4 shows a component configuration for a multi-media session shownaccording to an embodiment of the invention;

FIG. 5 shows a variation of the component configuration shown in FIG. 4according to an embodiment of the invention;

FIG. 6 shows a variation of the component configuration shown in FIG. 4according to an embodiment of the invention;

FIG. 7 shows a variation of the component configuration shown in FIG. 4according to an embodiment of the invention;

FIG. 8 shows a variation of the component configuration shown in FIG. 4according to an embodiment of the invention;

FIG. 9 shows a variation of the component configuration shown in FIG. 4according to an embodiment of the invention;

FIG. 10 shows a component configuration for a multi-media sessionaccording to an embodiment of the invention;

FIG. 11 shows a variation of the component configuration shown in FIG.10 according to an embodiment of the invention;

FIG. 12 shows a variation of the component configuration shown in FIG.10 according to an embodiment of the invention;

FIG. 13 shows a variation of the component configuration shown in FIG.10 according to an embodiment of the invention;

FIG. 14 shows a variation of the component configuration shown in FIG.10 according to an embodiment of the invention;

FIG. 15 shows a variation of the component configuration shown in FIG.10 according to an embodiment of the invention;

FIG. 16 shows a variation of the component configuration shown in FIG.10 according to an embodiment of the invention;

FIG. 17 shows a procedure for receiving a multi-media session inaccordance with an embodiment of the invention;

FIG. 18 shows a flow diagram for the architecture shown in FIG. 17 inaccordance with an embodiment of the invention;

FIG. 19 shows a system for protected content transfer that supportsDVB-H IPDC (IP datacast) services according to prior art;

FIG. 20 shows a system that supports DVB-H IPDC services in accordancewith an embodiment of the invention;

FIG. 21 show a flow diagram for transmitting data for DVB-H IPDCservices in the system shown in FIG. 20 in accordance with an embodimentof the invention;

FIG. 22 shows a system that supports DVB-H IPDC services in accordancewith an embodiment of the invention;

FIG. 23 shows a system that supports DVB-H IPDC services in accordancewith an embodiment of the invention;

FIG. 24 shows an apparatus for that supports a transmission module asshown in FIGS. 20, 22, and 23 in accordance with an embodiment of theinvention;

FIG. 25 shows an apparatus that receives a multi-media broadcast andthat applies IPSec keys in accordance with an embodiment of theinvention;

FIG. 26 shows an apparatus that receives a multi-media broadcast andthat decrypts the IPSec keys in accordance with an embodiment of theinvention;

FIG. 27 shows a system for deploying a security plug-in software modulein accordance with an embodiment of the invention;

FIG. 28 shows and example of a prior art method of providing encryptedcontent;

FIG. 29 shows a method of providing encrypted streaming content inaccordance with an embodiment of the invention;

FIG. 30 shows a method of broadcasting streaming content in accordancewith an embodiment of the invention;

FIG. 31 shows a timeline of changes to traffic keys in accordance withan embodiment of the invention;

FIG. 32 shows a division of program segments in accordance with anembodiment of the invention; and

FIG. 33 shows a system for providing using a plurality of rights objectsin accordance with an embodiment of the invention.

DETAILED DESCRIPTION OF THE INVENTION

In the following description of the various embodiments, reference ismade to the accompanying drawings which form a part hereof, and in whichis shown by way of illustration various embodiments in which theinvention may be practiced. It is to be understood that otherembodiments may be utilized and structural and functional modificationsmay be made without departing from the scope of the present invention.

To aid in organization and for the ease of the reader, the detaileddescription is provided in two sections. First, in FIGS. 1-27, detailsregarding methods of sending and receiving content in accordance withaspects of the present invention are provided. Next, in FIGS. 28-33,details regarding methods and apparatus for controlling usage rights forportions of content are disclosed.

Methods and Apparatus for Providing Streaming Content

FIG. 1 shows transmission of Internet Protocol (IP) services utilizingtime slice transmission in accordance with an embodiment of theinvention. A base station broadcasts data packets for a plurality of IPservices using data streams 101, 103, 105, and 107. (Each data stream isallocated a portion of a data rate capacity.) In the embodiment, thebase station may support functionality that is typically assumed by abase transceiver station (BTS), a base station controller (BSC), acombination of a BTS and a BSC, and a node B, which is a thirdGeneration (3G) designation of a base transceiver station. Datatransmission is essentially continuous such that data packets for an IPservice are continuously being conveyed through a data stream.

In order to mitigate the loss of data packets, data streams 101, 103,105, and 107 are mapped by base stations into bursts of data packets109, 111, 113, and 115, respectively, in which bursts are transmittedover radio channels rather than data streams 101, 103, 105, and 107.Each data stream (101, 103, 105, and 107), and consequently each burst(109, 111, 113, and 115), supports at least one data service. Thus, eachburst may support a plurality of data services (e.g., a group of relateddata services).

Data rates associated with bursts 109, 111, 113, and 115 are typicallygreater than data rates that are associated with data streams 101, 103,105, and 107 so that a corresponding number of data packets can be sentin a shorter amount of time. In the embodiment, data streams 101, 103,105, and 107 correspond to continuous data rates of approximately 100Kbit/sec. Bursts 109, 111, 113, and 115 typically correspond toapproximately 4 Mbit/sec (but may be in excess of 10 Mbit/sec) with anapproximate one second duration. However, other embodiments may usedifferent data rates for data streams 101-107 and for bursts 109-115.

In the embodiment, the entire data rate capacity is allocated to a burstat a given time. As shown in FIG. 1, bursts 109, 111, 113, and 115 areinterleaved in time. An idle time duration (during which data packetsare not transmitted for the particular data service) occurs betweenconsecutive transmissions of a burst (e.g., burst 109). A wirelessbroadcast system can utilize the idle time duration during which thewireless terminal can be instructed to transfer to another base stationto complete a handover. The other base station may transmit the samedata as the base station previously serving the wireless terminal usinga different center frequency and a different amount of phase shift. Theutilization of time slicing enables a terminal to reduce the consumptionof electrical power that is provided by a power source (typically abattery).

Bursts are typically transmitted periodically by a base station. Forexample, a subsequent burst may occur T seconds after burst 109, inwhich a burst is transmitted every T seconds. The wireless terminal maymaintain precise timing, as with the Global Positioning System (GPS), todetermine an absolute time at which each burst occurs. In anotherembodiment, the wireless terminal is provided information about a timeperiod in each burst, informing the wireless terminal about thesubsequent burst. With an embodiment of the invention, the time periodinformation includes a real-time parameter (corresponding to “delta-t”with DVB-H) that indicates a time interval from the beginning of a timeslice burst to the beginning of the next time slice burst of the sameservice and that is signaled in a MPE section header. The time periodmay be included in an IP packet, a multiprotocol encapsulated frame, anyother packet frame, and a third generation (3G) or General Packet RadioService (GPRS) channel or modulation data, such as transmitter parametersignaling. Alternatively, the wireless terminal may detect an occurrenceof a burst by receiving a signal preamble, which may be a data sequencethat is known a priori to the wireless terminal. In another embodiment,the wireless terminal may receive an overhead message on an overheadchannel from a base station. The overhead message may contain timinginformation regarding the occurrence of bursts. The overhead channel maybe logically or physically distinct from the downlink radio channel thatsupports the transmission of bursts.

Bursts 109, 111, 113, and 115 may be formatted by using a multi-protocolencapsulation in accordance with Section 7 of European Standard EN 301192 “Digital Video Broadcasting (DVB), DVB specification for databroadcasting.” The encapsulation may conform to Internet Protocol (IP)standards.

In an embodiment of the invention, a Digital Video Broadcast (DVB-H)provides mobile media services to wireless terminals, e.g., handheldwireless units. In the embodiment, the DVB-H system is compatible withDVB-T (digital video broadcast for terrestrial operation) and supportsenhancements to better support operation of wireless handheld terminals.The DVB-H system supports Internet Protocol (IP) based data services inwhich the information may be transmitted as IP datagrams. The DVB-Hsystem incorporates enhancements (with respect to a DVB-T system) thatfacilitates access to IP based DVB services on wireless handheldwireless terminals. (Alternative embodiments of the invention supportvariations of digital video broadcast systems including DVB-T, ATSC, andISDB-T.) The DVB-H enhancements are based on the physical layer of theDVB-T physical layer with a number of service layer enhancements aimedat improving battery life and reception in the handheld environment.Thus, the DVB-H enhancements compliment existing digital terrestrialservices, offering service providers the possibility to extend themarket to the wireless handheld market.

FIG. 2 shows an internet protocol (IP) stack 200 that supportstransmission of multi-media data in accordance with an embodiment of theinvention. Digital media content or other data is broadcasted usingvarious application protocols, transport protocols and networkprotocols. With IP stack 200, an IP data broadcast supports anaudio-visual service having MPEG4-AVC video 201, MPEG4-AAC audio 203 andauxiliary data 205 components. Each component (201, 203, or 205) isprocessed by coder 207, coder 209, or coder 211 in order to obtainpackets that are formatted for Real Time Protocol (RTP) layer 213. Thepackets (datagrams) are subsequently processed by UDP (user datagramprotocol) layer 215 and Internet Protocol (IP) layer 217. Datagrams areassociated with time slice bursts by formatting the datagrams using amulti-protocol encapsulation (typically corresponding to a link layer inthe OSI model) such as, for example, in accordance with Section 7 ofEuropean Standard EN 301 192 “Digital Video Broadcasting (DVB), DVBspecification for data broadcasting.” The encapsulation may conform toInternet Protocol (IP) standards.

A multi-media session typically is associated with one or more sessioncomponents (audio, video and auxiliary data in above case) that arelogically bound together. The parts of the session are sent between acommon start time and end time. Both start time and/or end time of canbe either defined or undefined.

FIG. 3 shows a component configuration 300 for a multi-media session 301according to an embodiment of the invention. Component 303 correspondsto a plurality of datagrams (including datagrams 309 and 315); component305 corresponds to a plurality of datagrams (including datagrams 311 and317); and component 307 corresponds to a plurality of datagrams(including datagrams 313 and 319). Components 303, 305, and 307 aretransmitted within IP packets that are encapsulated to messaging of anunderlying bearer layer. Each component 303, 305, and 307 has a definedsource IP address, destination IP address, and port used in the IPpackets that carry data associated with the component. Differentcomponents may have an independently defined source IP address, adestination IP address, and a port. In variations of the embodiment, amulti-media session may have a different number of components.

While exemplary component configuration 300 shows datagram alignmentbetween components 303, 305, 307, the embodiment supports configurationsin which the datagrams are not aligned and the number of datagrams foreach component is different from that of the other components. Forexample, the number of datagrams for an audio component is typicallyless than the number of datagrams for a video component during a giventime interval.

FIG. 4 shows a component configuration 400 for a multi-media session 401according to an embodiment of the invention. Components 403, 405, and407 are encrypted with the same key that changes periodically inkeystream 409 during multi-media session 401. (In FIGS. 4-16, a datagramthat is encrypted with key k_(i) is denoted as E_(i). (Keystream 409 isa logical channel that contains key information and that is separatefrom the media components.) Similarly, a datagram associated with thej^(th) component and that is encrypted with the i^(th) key associatedwith the j^(th) component is denoted as E_(ji).) The embodiment supportsdifferent encryption methods that are applied to component 403, 405, or407, including:

-   -   IPSEC-ESP (so called IP-level encryption; see RFC on IPSEC-ESP)    -   Payload of the application session packet encrypted (for example        SRTP or DCF of OMA DRM 1.0 or 2.0)    -   Encryption

The above encryption methods may be applied separately or in combinationduring multi-media session 401. Components 403, 405, and 407 correspondto a different plurality of content datagrams. Keystream 409 includes aplurality of associated datagrams, each associated datagramcorresponding to an encryption key. Encryption is typically performed onan individual datagram (e.g., packet) basis. For example, contentdatagrams 415, 425, 427, 435, and 437 are encrypted with key k₁(corresponding to associated datagram 411) and content datagram 417 isencrypted with k₂ (corresponding to associated datagram 413).

Keystream 409 utilizes a delivery protocol such as RTP, ALC/FLUTE,UHTTP, DVBSTP, IP with a payload, and UDP with a payload. The keysdelivered in keystream 409 are typically protected by another key thatthe entitled receiver has in order to access the contents of keystream409 that carries keys, thus enabling access to the components 403, 405,and 407. The delivery of keystream 409 is optionally synchronized withcomponents 403, 405, and 407, e.g., RTP timestamps with the use of RTPControl Protocol).

FIG. 5 shows a variation of the component configuration shown in FIG. 4according to an embodiment of the invention. Component configuration 500is similar to component configuration 400. Multi-media session 501includes components 503, 505, and 507 and keystream 509. Component 505is encrypted with keys from keystream 509, while components 503 and 507are not.

FIG. 6 shows a variation of the component configuration shown in FIG. 4according to an embodiment of the invention. Component configuration 600is similar to component configuration 400. However, keystream 609includes three series of keys 611, 613, and 615 that correspond tocomponents 603, 605, and 607, respectively. The keys may changeperiodically but independently during multi-media session 601 but may besynchronized with each other.

FIG. 7 shows a variation of the component configuration shown in FIG. 4according to an embodiment of the invention. Component configuration 700is similar to component configuration 600 except that keys for eachcomponent are carried on different keystreams that change duringmulti-media session 701. Rather than having one keystream, componentconfiguration 700 utilizes three keystreams 709, 711, and 713.Keystreams 709, 711, and 713 correspond to components 703, 705, and 707,respectively.

FIG. 8 shows a variation of the component configuration shown in FIG. 4according to an embodiment of the invention. With componentconfiguration 800, component 805 is encrypted with keys from keystream809. However, keystream 809 provides keys that are currently applicableto decrypting component 805 as well as keys that will be subsequentlyused in decrypting component 805. In the example shown in FIG. 8, key k₁(corresponding to datagram 811) is currently applied while keys k₂(corresponding to datagram 813) and k₃ (corresponding to datagram 815)are subsequently applied. While components 803 and 807 are not encryptedduring multi-media session 801, components 803 and 807 may be encryptedwith other variations of the embodiment. Having keys that will besubsequently applied enables a receiver device to smoothen keytransitions during multi-media session 801. For example, the receiverdevice can configure the IP stack with a new key to reduce interruptionsin decrypting content datagrams.

FIG. 9 shows a variation of the component configuration shown in FIG. 4according to an embodiment of the invention. Keystream 909 includes thekey currently being applied to component 905 for encryption as well askeys that will be subsequently applied when the key transition is withina predetermined incremental time of the current time. For example,before key transition 951, keystream 909 includes both keys k₁(corresponding to datagram 911) and k₂ (corresponding to datagram 913)and includes only k₂ (corresponding to datagram 915) after the keytransition 951. As with component configuration 800, componentconfiguration 900 assists the receiver device to smoothen the effects ofkey transitions.

FIG. 10 shows a component configuration 1000 for a multi-media session1001 according to an embodiment of the invention. However, in comparisonwith component configurations 400-900, keys are carried in one or moreof the components rather than having a separate keystream fortransmitting the keys. With component configuration 100, component 1005includes content datagrams (e.g., content datagram 1011) as well asdatagram 1009 that provides key k₁ that has been used for encryptingcomponents 1003, 1005, and 1007.

FIG. 11 shows a variation of the component configuration shown in FIG.10 according to an embodiment of the invention. With componentconfiguration 1100, component 1107 provides key k₁ (corresponding todatagram 1109) and key k₂ (corresponding to datagram 1111) that areapplied to component 1105 during multi-media session 1101. In theexample shown in FIG. 11, components 1103 and 1107 are not encryptedwith the keys provided by component 1107.

FIG. 12 shows a variation of the component configuration shown in FIG.10 according to an embodiment of the invention. Component configuration1200 is similar to component configuration 1100. However, keys areapplied to both the component carrying key information (component 1205)as well another component (component 1203) during multi-media session1201. However, in the example shown in FIG. 12, component 1207 is notencrypted.

FIG. 13 shows a variation of the component configuration shown in FIG.10 according to an embodiment of the invention. With componentconfiguration 1300, each component 1303, 1305, and 1307 carries keysthat are applied to the same component during multi-media session 1301.For example, keys k₁₁ (corresponding to datagram 1309) and k₁₂(corresponding to datagram 1311) are applied to component 1303. Keys k₂₁(corresponding to datagram 1313) and k₂₂ (corresponding to datagram1315) are applied to component 1305. Keys k₃₁ (corresponding to datagram1317) and k₃₂ (corresponding to datagram 1319) are applied to component1307.

FIG. 14 shows a variation of the component configuration shown in FIG.10 according to an embodiment of the invention. With componentconfiguration 1400, each component 1403, 1405, and 1407 carries keysthat are applied to a different component during multi-media session1401. For example, keys k₁₁ (corresponding to datagram 1413 and carriedby component 1405) and k₁₂ (corresponding to datagram 1419 and carriedby component 1407) are applied to component 1403. Keys k₂₁(corresponding to datagram 1417 and carried by component 1407) and k₂₂(corresponding to datagram 1411 and carried by component 1403) areapplied to component 1405. Keys k₃₁ (corresponding to datagram 1409 andcarried by component 1403) and k₃₂ (corresponding to datagram 1415 andcarried by component 1405) are applied to component 1407.

FIG. 15 shows a variation of the component configuration shown in FIG.10 according to an embodiment of the invention. With componentconfiguration 1500, key information is carried in a content datagramrather than in a separate datagram. For example, key k₁ is included incontent datagram 1509 within a concatenated portion (or with a specialheader) 1511 and k₂ is included in content datagram 1513 within aconcatenated portion (or with a special header) 1515. Keys k₁ and k₂ areapplied to datagrams in components 1503, 1505, and 1507.

FIG. 16 shows a variation of the component configuration shown in FIG.10 according to an embodiment of the invention. Component configuration1600 is similar to component configuration 800, in which both thecurrent key as well as subsequent keys are provided. For example,component 1605 carries key k₁ (corresponding to datagram 1609) and keyk₂ (corresponding to datagram 1611), where key k₁ is currently appliedto components 1603 and 1607 and key k₂ is subsequently applied duringmulti-media session 1601. Similarly, key k₂ (corresponding to datagram1613) and key k₃ (corresponding to datagram 1615) are subsequentlycarried in component 1605. As with component configuration 800,component configuration 1600 assists the receiver device to smoothen keytransitions.

FIG. 17 shows an architecture 1700 for receiving a multi-media sessionin accordance with an embodiment of the invention. With architecture1700, a receiving device receives time slice burst of data 1701containing both the IP session components and the keystream related tothe session components. Pluralities of content datagrams 1705, 1707, and1709 correspond to component 1, component 2, and component 3,respectively. A plurality of datagrams 1711 corresponds to thekeystream. Time slice burst 1701 is stored in interim buffer 1713 beforeforwarding the datagrams (packets) to IP stack 1721. The receivingdevice first extracts the keys (corresponding to datagram 1717) for thereceived time slice burst 1701 from interim buffer 1713. Second, thereceiving device installs the extracted keys to IPSec SecurityAssociation (SA) database 1719. Also, the receiving device extractsremaining datagrams 1715 from the interim buffer and forwards them to IPstack 1721. After decryption, the processed datagrams are passed toapplications 1723 for the presentation of the multi-media content.Consequently, IP stack 1721 does not reject the content datagrams(unless there are content datagrams that the receiving device did nothave a corresponding key as delivered in the current time slice or aprevious time slice burst). The process is repeated for a next receivedtime slice burst 1703.

FIG. 18 shows flow diagram 1800 for the architecture shown in FIG. 17 inaccordance with an embodiment of the invention. In step 1801, areceiving device receives a time slice burst over a communicationschannel, e.g., a wireless channel. In step 1803, the receiving deviceseparates components (e.g., an audio component and a video component)from the received time slice burst. In step 1805, the receiving deviceextracts the associated set of keys from the keystream. The extractedkeys may be applied to content datagrams contained in the time sliceburst or in subsequent time slice bursts. Also, the embodiment supportsconfigurations in which different keys are used for different datagramsin the time slice burst. The extracted keys are applied to an IPSecSecurity Association (SA) database (e.g., SA DB 1719 shown in FIG. 17)in step 1807. In step 1809, the content datagrams are extracted from abuffer (e.g., interim buffer 1713) and sent to an IP stack (e.g., stack1721) in step 1811. The content datagrams are subsequently decrypted andsent to the corresponding application.

FIG. 19 shows a system 1900 for protected content transfer that supportsDVB-H IPDC (IP datacast) services according to prior art. System 1900provides protected content transfer for DVB-H services using IPDC asspecified in “Interim DVB-H IP Datacast Specifications: IP DatacastBaseline Specification: Specification of Interface I_MT”, DVB DocumentA080, April 2004. In accordance with this specification, portions ofsecurity associated data are transmitted in an electronic servicedirectory (ESG) in SA carousel 1921 as DRM protected SA file 1919 (whichis provided by digital rights manager (DRM) 1909 by performing theprotection function) and IPSec policy file 1911. As the carousel data istypically updated infrequently (e.g., once a day) system 1900 does notprovide an efficient solution for key delivery, especially if one ormore of the keys is updated or frequently changes.

Multi-media content 1901 (corresponding to IP datagrams) is encrypted byencryption module 1903 with IPSec keys 1905 and transmitted (asperformed by transmission system 1925) as time slice packets (aftermulti-protocol encapsulation, FEC encoding, and time slice burstformation) to receiving device 1926. Rights object (RO) 1923 (which isprovided by rights object generation 1922) is transmitted to receivingdevice 1926 through an interaction channel, in which receiving device1926 is provided with a means for bidirectional communications, e.g.,mobile phone functionality. A user of receiving device 1926 may orderservice (content) and consequently receive the corresponding rightsobject (RO) 1933, which allows the user to decrypt the content of theordered service. In the embodiment, rights object 1933 typically doesnot contain IPSec keys 1905.

Receiving device 1926 processes time slice bursts with burst processingmodule 1927. Received packets are decrypted by decryption module 1929with a key provided by key extraction module 1931 in order to obtaincontent 1935. The keys are determined from rights object 1933. The keysare typically delivered in a SA carousel as DRM protected SA files.Rights object 1933 allows receiving device 1926 to extract the keys.

FIG. 20 shows a system 2000 that supports DVB-H IPDC services inaccordance with an embodiment of the invention. Multi-media content 2001(corresponding to content datagrams) is encrypted by encryption module2003 by applying IPSec keys 2005. Transmission system 2025 obtains bothencrypted content datagrams from encryption module 2003 and thecorresponding keys from DRM 2009. Transmission system 2025 formscorresponding datagrams that contain the keys corresponding toencrypting the content datagrams. Transmission system 2025 inserts boththe encrypted content datagrams and the corresponding datagrams into atime slice burst, which is transmitted to receiving device 2026 over acommunications channel. While FIG. 20 does not explicitly show a radiomodule, the embodiment may provide wireless signal capability in orderto transmit the time slice burst to receiving device 2026 over awireless channel.

Receiving device 2026 processes a received time slice burst, in whichthe encrypted content datagrams and corresponding datagrams (containingthe corresponding keys that are used for encrypting the received contentdatagrams) are separated (demultiplexed) by burst processing module2027. In the embodiment, receiving device 2026 comprises a broadbandreceiver for receiving DVB signals that include time slice bursts and atransceiver for bidirectional communications in a wireless network. Thebidirectional communications supports service ordering by a user, OMAmessaging, and security plug-in module installation. The embodimentsupports different signal configurations, in which the keys are includedin a separate keystream or in which keys are included in multi-mediacomponents as previously discussed with FIGS. 4-16. Key extractionmodule 2031 extracts the keys from the corresponding datagrams in orderto decrypt the content datagrams, as performed by decryption module2029. Decryption module provides decrypted content 2035 to anapplication (not shown) so that the content can be presented.

Additionally, rights management object 2023 (as determined by rightsobject generator 2022) is separately transmitted to receiving device2026 in response to a purchase order. Consequently, receiving device2026 receives rights object 2033 to determine if receiving device 2026is permitted to process the received content.

FIG. 21 show a flow diagram 2100 for transmitting data for DVB-H IPDCservices in system 2000 in accordance with an embodiment of theinvention. In step 2101, transmitting apparatus (e.g., transmissionsystem 2025) determines if an obtained content datagram should beincluded in the current time slice burst. If not, the time slice burst(with previously obtained content datagrams and associated keys) is sentto the receiving device in step 2109.

If the obtained content datagram should be included in the current timeslice burst, step 2103 determines the corresponding key and encrypts thecontent datagram with the key in step 2105. In step 2107 the encryptedcontent datagram and the corresponding key information (corresponding toa corresponding datagram that may be included in multi-media componentor in a keystream) is inserted in the current time slice burst.

FIG. 22 shows a system 2200 that supports DVB-H IPDC services inaccordance with an embodiment of the invention. In FIG. 22, elements2201, 2203, 2205, 2222, 2223, 2227, 2229, 2231, 2233, and 2235correspond to elements 2001, 2003, 2005, 2022, 2023, 2027, 2029, 2031,2033, and 2035 as shown in FIG. 20. As with system 2000, system 2200transmits content datagrams and corresponding key information in thesame time slice burst. Key information is provided to transmissionsystem 2225 by key message generator 2206. Key message generator mayfurther encrypt the keys so that encrypted key information istransmitted to receiving device 2226 by transmission system 2225. DRM2209, in conjunction with rights object generator 2222, provides rightsobject 2233 that corresponds to the desired DVB-H IPDC service toreceiving device 2226.

IPSec policy files 2211 (that may contain security associationinformation) are separately transmitted in SA carousel 2221 from theservice (content) and key messages that are multiplexed and transmittedusing IPDC time slicing. In the embodiment, SA carousel 2221 istransmitted as part of the electronic service guide (ESG).

FIG. 23 shows a system 2300 that supports DVB-H IPDC services inaccordance with an embodiment of the invention. System 2300 supportsconditional access (CA) that can provide a second-level of encryptionusing a corresponding private key. (As will be discussed with FIG. 26,IPSec keys may be encrypted by digital rights management (DRM) as wellas by a CA module.) Receiving device 2326 comprises a receiver sectionand a terminal section. The receiver section performs burst processing,demultiplexing, and key management. The receiver section also includesCA plug-in installation and key decryption. DRM 2351 sends CA plug-ininstallation package 2353 to DRM 2314 so that a new CA plug-in module isinstalled at receiving device 2326 as will be further discussed withFIG. 27. The key decryption is performed in a secure processingenvironment. The terminal section performs key management and keydecryption in addition to the decryption (corresponding to decryptionmodule 2329) and content rendering (corresponding to content 2335).

Encryption of keys 2305 (which are used to encrypt content 2301 byencryption module 2303) is performed by key encryption module 2311. Keyencryption module 2311 comprises CA module 2308 and DRM 2309. Thus, keyencryption module 2311 may provide two levels of encryption. Both theencrypted key information and the content datagrams are included in thesame time slice burst by transmission system 2325.

Correspondingly, decryption of the received key information is performedby key decryption module 2317. Key decryption module 2317 comprises DRM2314 and CA module 2315. Key decryption module 2317 performs two levelsof decryption that correspond to the two levels of encryption. Burstprocessing module 2327 decrypts the received content datagrams using thedecrypted keys provided by key manager 2313. Received content datagramsare decrypted by decryption module 2329 of the terminal section. Keymanager 2313 receives the key information that is demultiplexed bymodule 2327 and forwards the key information to key decryption module2317 (which is associated with a trusted environment) for DRM and CAdecryption.

In the embodiment, the rights object (RO) is transmitted as an OMA DRM 2message (according to the proposed Open Mobile Alliance Digital RightsManagement Version 2.0) from DRM 2309 to DRM 2314. The rights object istypically transmitted separately from the time slice bursts.

FIG. 24 shows apparatus 2400 that supports a transmission system (e.g.,2025, 2225, and 2325) as shown in FIGS. 20, 22, and 23 in accordancewith an embodiment of the invention. In the embodiment, apparatus 2400performs functions typically associated with a link layer (the secondlayer of the OSI protocol model). Processor 2405 obtains encrypteddatagrams from an encryption module (not shown) through encryptioninterface 2401 and corresponding key information from a key generator(not shown) through key interface 2403. Transmission interface 2407encodes the datagrams for forward error correction at the receivingdevice, performs multi-protocol encapsulation, and formats the timeslice burst with the encoded datagrams. (In the embodiment, thedatagrams include both content datagrams and corresponding datagramscontaining the keys.)

FIG. 25 shows apparatus 2500 for a receiving device (e.g., receivingdevices 1926, 2026, 2226, and 2326 as shown in FIGS. 19, 20, 22, and 23,respectively) that receives a multi-media broadcast and that appliesIPSec keys in accordance with an embodiment of the invention. Apparatus2500 processes a time slice burst (e.g., time slice bursts 2501 and2503) in order to extract the content datagrams and associatedkeystream. In the embodiment shown in FIG. 25, time slice burst 2501 ortime slice burst 2503 has content datagrams (e.g., content datagrams2505, 2507, and 2509) with ESP capsulated IP-packets containing servicecontent and corresponding key datagrams (e.g., corresponding datagram2511) comprising UDP key-messages. The keys in an UDP key-message may beprotected with DRM.

Apparatus 2500 is capable of distinguishing between service content andkey-messages. Consequently, receiver module 2551 separates contentdatagrams from key datagrams. In the embodiment, key datagrams are givena higher priority level than content datagrams by the transmittingapparatus (not shown). In the embodiment, the priority level associatedwith a datagram is indicated by a field, e.g., a type of service (ToS)field or a differentiated services field. Thus, key datagrams are sentto IP stack 2553 before corresponding content datagrams so that moretime may be allotted for key processing by key decryption module 2555.Key decryption module is presented encrypted keys from IP stack 2553through key manager 2559.

The embodiments shown in FIGS. 17 and 25 include the keys in the sametime slice burst as the associated content datagram. However, in anotherembodiment, keys in a time slice burst are associated with decryptingcontent datagrams that are contained in the next time slice burst, thusallowing more time for key processing. Other variations are possible.For example, a number of keys for use in decrypting content may beprovided in a single time slice burst and the keys may then be used fora plurality of subsequent time slice bursts.

The decrypted keys are presented to IPSec module 2557 so that theassociated content datagrams in IP stack 2553 can be decrypted andpresented to client 2561.

FIG. 26 shows apparatus 2600 that receives a multi-media broadcast andthat decrypts received IPSec keys 2601 in accordance with an embodimentof the invention. Key manager 2653 routes the encrypted IPSec key to DRMserver 2655 to decrypt a second-level of encryption using a publicdecryption algorithm and private key 2603. DRM server 2655 returnssecond-level decrypted key 2607 to key manager 2653. If the key manager2653 determines that the key is encrypted with a first-level ofencryption, key manager 2653 routes the second-level decrypted key to CAplug-in software module 2657. CA plug-in module 2657 utilizes a secretdecryption algorithm and private key 2605 to decrypt second-leveldecrypted key 2607. In an embodiment of the invention, the secretdecryption algorithm corresponds to a DVB common scrambling algorithm(CSA), which is available from the European Telecommunications StandardsInstitute (ETSI). CA plug-in software module 2657 returns decrypted key2609 to key manager 2653, which forwards decrypted key 2609 to IP stack2651.

In the embodiment, CA plug-in module 2657 performs a first-level ofdecryption that is optional and that is based on an operator-specificCA-method that includes an associated private key and an associateddecryption algorithm. The second-level of encryption is based on an openstandard, e.g., OMA DRM2. Because the first-level of encryption isoptional, key manager 2653 determines whether a first-level ofencryption has been applied to second-level decrypted key 2607. If so,key manager 2653 routes second-level decrypted key 2607 to CA plug-insoftware module 2657. If not, key manager 2653 routes second-leveldecrypted key 2607 directly to IP stack 2651 because second-leveldecrypted key 2607 is completely decrypted.

In the embodiment, key manager 2653 determines whether second-leveldecrypted key 2607 has been first-level encrypted by examining anassociated encryption indicator (not shown), e.g., a header or a messagefield. The associated encryption indicator indicates ‘YES’ ifsecond-level decrypted key 2607 has been first-level encrypted and ‘NO’if second-level decrypted key 2607 has not been first-level encrypted.If second-level decrypted key 2607 has been first-level encrypted, theassociated encryption indicator is not first-level encrypted.

FIG. 27 shows system 2700 for deploying a new security plug-in softwaremodule 2701 at receiving device 2750 in accordance with an embodiment ofthe invention. Security plug-in software module 2701 is formatted as aninstallation package 2705 (e.g., a SIS file as supported by Symbian).Installation package 2705 is protected (e.g., with OMA-DRM2) to formprotected package 2707 and delivered to a receiving device using adelivery mechanism. The embodiment supports different communicationschannels in a delivery mechanism, including a wireless communicationschannel in which the receiving device is a wireless terminal. Thereceived protected package 2707 is directed to application installer2751, which is a trusted application. Application installer 2751extracts new security plug-in software module 2701 from protectedpackage 2707 and replaces current security plug-in software module 2755that is currently installed at the receiving device 2750 with newsecurity plug-in software module 2701. In order to extract new securityplug-in software module 2701, receiving device 2750 receives rightsobject 2703 that is processed by DRM 2753. Consequently, DRM 2753indicates to application installer 2751 that security plug-in softwaremodule replacement is permitted.

In embodiments of the invention, component configurations as shown inFIGS. 3-16 may be incorporated in systems as shown in FIGS. 20, 22, and23.

Methods and Apparatus for Providing Fine Grain Usage Rights

While the above discussion provide details regarding embodiments ofmethods and apparatuses for use in providing streaming content that maybe used with the methods and apparatus discussed below, other methodsand apparatus may also be used.

Control of rights for streaming content is somewhat difficult becausethere is a limited amount of bandwidth available. A natural solution tothe problem is to create and deliver in the normal way ROs with veryshort validity periods, possibly containing the same service key butwith different usage rights. This may be cumbersome in practice though,as service keys change much less frequently than, for example,television programs on a television channel. As another solution, ROs orjust right expressions could be delivered in KSMs. Sending complete ROsfrequently in the KSM would consume quite a bit of bandwidth however, asthey must be addressed to each subscriber (or a group of subscribers)individually, so that only those who have paid get the rights. Even ifthe rights are the same to all subscribers, and access to the KSM islimited by other means so that the KSM needs to contain only the rightsexpression part of a RO, the rights expression itself may require aconsiderable number of bits, particularly if an XML-type RightsExpression Language is used. Typical solutions to this problem involvevarious compression methods to binarize the rights expression, or tolimit the possible rights to a few predetermined cases (“usage states”).However, these potential solutions fail to adequately provide RIs with asufficiently fine grain control in a bandwidth friendly manner so as tobe practical for adoption.

Looking first at FIG. 28, an example of the prior art is provided. Thecontent is encrypted (E) with a content key (CK) and provided to areceiver (not shown). The receiver separately obtains a RO 2860 thatincludes the CK along with a set of usage rights. The received encryptedcontent may then be viewed or otherwise used as provided for in the ROaccording to the usage rights obtained. However, this prior art methodis not particularly suitable to streaming content.

Turning to FIG. 29, an illustrative aspect of the present invention isshown. Streaming content 2910 is provided to a broadcaster and isencrypted in encryption 2915 using TK 2925. The receiver (not shown) isprovided with the TK 2925 via a KSM 2940, the KSM 2940 being formed byencryption 2930 using the SK 2950 along with TK 2925. The keystream,which provides the KSM, is announced to the users with IP address andport number. As the TK 2925 is encrypted with SK 2950, the device usesRO 2960, which contains the SK 2950, to decrypt the KSM 2940 so as to beable to decrypt the streaming content 2910. In addition to providing theSK 2950, the RO 2960 also provides usage rights 2965.

Typically, the TK will periodically change. FIG. 31 provides an exampleof this. As noted, the TK changes several times while the SK is valid.In practice, the number of changes in the TK may be much higher. Whenthe TK changes, a new KSM 2940 (FIG. 29) is provided to the receiverwith the new TK encrypted by the same SK 2950. Thus, while the SK 2950remains the same, the RO 2960 will allow the receiver to decrypt thestreaming content. When the SK changes, however, a new RO is needed sothat the KSMs sent to the device may be decrypted and the streamingcontent used as permitted. Generally, ROs purchased from RIs must haverelatively long validity periods to make the DRM mechanism feasible. Inan embodiment, once a parent RO is obtained, the child ROs may also beobtained. As discussed above with reference to keys in FIGS. 4-16, inone embodiment of the invention the TKs are delivered in the KSM priorto their validity period so that the user (device) may decrypt thekey(s) and bit combination before the actual streaming content (orsegment of it) is received. Likewise, the RO may be acquired prior tothe validity period.

As noted above, the rights are typically expressed in REL. To addressthe issue of usage rights in a bandwidth friendly solution that providessufficient precision of control, a new REL variable called programcategory may be used. The program category variable can be small, forexample 2 bits, while still providing sufficient usage rights controlfor some applications. Using three or more bits, however, providesfiner-grain control and therefore may desirable. The size of variable,however, is somewhat dependent on the method of delivery. In someembodiments of the invention, instead of using a separate variable, theprogram category information is embedded in or concatenated with someother identifier, such as the content, program or service identifier.

Looking at FIG. 30, various content providers (CP) provide content to abroadcaster. In addition, various Ms communicate with the broadcaster,either to determine the program categories or to provide the programcategories, as will be discussed below. It should be noted that the RIsand CPs may or may not be the same entities. The content is encryptedand then broadcast to the receivers. It should be noted that the contentencryption can be made by the content provider or by the broadcaster andthe encryption keys are delivered accordingly between the encrypter andrights issuer (RI).

For example, consider a broadcast service and a device. From aparticular RI, the device obtains a RO from a particular RI to accesscertain content, and there is a REL description of the usage rights forthe content in the RO. While the description is static for the validityperiod, the REL may contain usage rights which are conditional to theprogram category REL variable. Thus, as KSMs change the value of theprogram category REL variable, the (conditional) usage rights currentlyin effect may change.

The value of the program category variable may be derived from the KSMsof the broadcast service in question in two alternative ways, discussedbelow. Since KSMs are sent very frequently, the changes of programcategory REL variable value and hence the changes in currently effectiveusage rights may be very fine grained in time. To save broadcastbandwidth, however, the amount of new data added to the KSMs forindicating the program category REL variable preferably is minimized.

Before discussing how the program categories may be provided to thereceiver, FIG. 32 shows an example of various portions of content. Forexample, streaming content 3210 may include a news category 3215, asports category 3217, a documentary category 3219 and a movie category3221. The news category may be further divided into n categories 3215-1,3215-2, . . . , 3215-n. These categories may, for example but withoutlimitation, represent headlines, domestic news, foreign news, etc. . . .Similarly, the sports categories 3217 could also be further divided intocategories such as highlights, scores, live broadcasting, etc. . . .Alternatively, the categories may not have anything to do with the typeof content, but are simply defined for each different set of differentusage rights. For example, the categories could be ‘highly restricted’,‘somewhat restricted’, ‘normal’ and ‘liberal’, reflecting thepermissions given to the user.

Below are two possible methods of providing KSM, the most significantdifference is the necessary interaction between the broadcaster and theRIs. It should be noted that some combination of the two methods couldalso be used.

Looking at the first method of determining the program category for theREL, in an aspect of the invention, the broadcaster “sorts” thestreaming content into different categories. For example, the number ofprogram category may be relatively small, such as 4 differentcategories, or may be relatively large, such as 256 different programcategories. Naturally, additional bits will be needed as the number ofprogram categories increases, thus two bits can provide informationregarding four program categories while 8 bits are needed to provide 256program categories. For instance, in a handheld television broadcastservice, each television program is categorized into one of a number ofprogram categories, which may include news, low value (lv) shows, highvalue (hv) shows, lv sports, hv sports, old movies, new movies, etc. RIscannot influence the categories (set by the broadcaster and common toall RIs), but they can freely use the wide program category REL variablevalue range (for example, from 0 . . . 255) in their usage rightsexpressed in REL in the RO they provide to the device. Typically,however, a smaller number, such as 12-16 program categories will be morepractical. No extra communication between the broadcaster and the RIs isneeded. Each of such program segments may be associated a set usagerights (in the invention report: program category) including ‘liverendering’, ‘storage and display for 48 hours’, ‘storage and displayindefinitely’, ‘relay and copying (forwarding) indefinitely’ or someother similar types.

Thus, the RO may include conditional rights expressed in REL that dependon the value of the program category. Thus, a user might purchasecomplete rights such that the RO provides the maximum allowable rightsfor the content. Alternatively, the user may select a promotional freeRO that provides much more limited rights and may only allow the displayof portions of the streaming content. Periodically the RO will beupdated because the SK changes, thus usage rights can vary from RO toRO. The user receives the one or more ROs whenordering/purchasing/subscribing/renewing the service or parts of it. Inone embodiment of the invention the user may first receive a ‘parent’ ROand further ‘child’ ROs may be acquired or created later. If the userhas not ordered (purchased/subscribed) the program segment that is beingreceived, the user is informed on that (‘You do not have rights to thisprogram/(program segment)’) and/or he is informed how to buy the rights.

In another aspect of the invention, as shown in FIG. 33, the RIs set thecategories and communicate them to the broadcaster, which then puts thecategories into the KSMs. Since there are multiple RIs, it may be usefulto limit the number of bits that are allowed per RI to two bits. In sucha case, the program category range could be 0 . . . 3. That range,however, would be RI specific, and could therefore directly relate tothe usage rights of a particular portion of streaming content (ratherthan streaming content type in a more generic fashion). In such a case,rather then provide a single RO, four ROs may be provided, each with aset of usage rights configured by the RI.

In the RO mechanism being used in FIG. 33, there must be a means ofindicating which category value relates to which RI, preferably withoutusing RI identities (which are larger than two bits). In an embodiment,each KSM 3340 contains a vector of N category values (for some N) whereeach category value may be two bits. In another embodiment of theinvention, the category values may be more than two bits. The ROsprovided to the receiver contains an RI index in the range 1 . . . N sothat the category value in each of the RI_1 through RI-N corresponds toa set of ROs. Still in other embodiments of the invention one or morebits or combinations of bits within KSM may be used for category values.While the KSM may include the vector, other formats and protocols may beused to provide the category value associated with the RI. In addition,in an embodiment a number of bits and/or bit combinations within thevector may be reserved for future use.

In another embodiment of the invention, a number of bits and/or bitcombinations in the

KSM, which may or may not have been reserved for other purposes, may bemapped to category values or interpreted as category values. Inaddition, certain locations within the KSM could be used to provide anindication as to whether a type of program could be viewed. An RO coulddetermine what the category value based on the category value providedby the KSM and then look at the appropriate place in the KSM todetermine what usage right existed, such as whether the content could bedisplayed. As each RO could be configured to look in different locationswith the KSM to determine the usage rights, individualized control thatmay vary with each KSM could readily be provided.

As shown, the user has received in this case four ROs from the RI #I,each with a user rights class. The advantage of using usage rightsclasses is that the total number and size of rights objects can besmaller than in the case of a complete set of ROs if the usage rightsare offered for purchasing on the level of program segments. When theuse receives the KSM carrying the actual TK, the bit combination at theposition corresponding to the position RI #I allows the user to selectthe RO that corresponds to his purchase. For example a value of 0 at RI#I would indicate RO1, a value of 1 would indicate RO2, a value of 2would indicate RO3 and a value of 3 would indicate the RO4. As the TKsmay be changed from program segment to program segment, the user may usehis rights in the way that he has ordered (purchased). It should benoted that the user is ‘listening’ to the KSM that has been announced tohim (IP address and port number).

For instance, in a handheld television broadcast service, based ontelevision program schedules, RIs choose one of the 4 categories foreach program, communicate them to the broadcaster, and the broadcasterthen includes the categories into the KSMs. For an RI, the fourcategories might be 1) live rendering only allowed, 2) storage andreplay allowed for 48 hours, 3) storage and replay allowed indefinitelyand 4) storage, replay and copying to other devices allowedindefinitely. This example, however, is merely illustrative and otherusage right combinations may be provided.

In the above situation all purchasers of the set of RO's from the RI mayhave the same set of rights. For example, one RI#J in the KSM 3340 maycorrespond to a particular package deal while a second RI#J+1 maycorrespond to a different package deal. It should be noted, however,that the program category for each RI is particular to the TK, thus thesame set of ROs can provide different usage rights for different TKs,and furthermore, different sets of ROs may provide different sets and/orcombinations of usage rights.

Thus, for one set of ROs the RO1 may provide view only usage rightswhile in another set of ROs the RO1 may provide for time shifting.

Yet, in both solutions, it must be remembered that the conditionalitybased on the categories only complements the overall usage rights in theRO, making it more dynamic: many usage rights are likely to beunconditional and thus not dependent on program category REL variablevalue.

Likewise, in both solutions, rather than providing conditionality withinthe usage rights of a single RO, the program category information sentin the KSM can alternatively be used to select one of a set of completeROs, or possibly one of several child ROs related to the same parent RO.

Thus, aspects of the present invention provide a bandwidth-efficient wayof delivering rights applicable to all subscribers, but which may varyprogram-by-program and time period by time period, while still allowingthe full richness of the REL for defining those rights for each programcategory. The invention can be applied to IPDC services over DVB-T,DVB-H, MediaFLO, OMA Broadcast and other systems.

As can be appreciated by one skilled in the art, a computer system withan associated computer-readable medium containing instructions forcontrolling the computer system can be utilized to implement theexemplary embodiments that are disclosed herein. The computer system mayinclude at least one computer such as a microprocessor, digital signalprocessor, and associated peripheral electronic circuitry.

While the invention has been described with respect to specific examplesincluding presently preferred modes of carrying out the invention, thoseskilled in the art will appreciate that there are numerous variationsand permutations of the above described systems and techniques that fallwithin the spirit and scope of the invention as set forth in theappended claims.

What is claimed:
 1. A method comprising: receiving a stream of dataincluding at least a first portion and a second portion subject to oneor more usage rights; generating at least a first traffic key and asecond traffic key in response to the receiving of the first portion andthe second portion; encrypting at least the first portion with the firsttraffic key and the second portion with the second traffic key;encrypting a keystream with a service key into a key stream message, thekeystream including at least the first traffic key and the secondtraffic key; and transmitting the encrypted stream of data and the keystream message, wherein the key stream message is separate from theencrypted stream of data, and wherein the encrypted stream of dataincludes the first portion and the second portion as separatelyencrypted.
 2. The method of claim 1 further comprising: transmitting afirst rights object, the first rights object including the service keyfor decrypting the key stream message.
 3. The method of claim 1, whereinthe key stream message includes a first program category variable valueassociated with the one or more usage rights granted by a first rightsissuer.
 4. The method of claim 3, wherein the key stream message furtherincludes a second program category variable value associated with theone or more usage rights granted by a second rights issuer.
 5. Themethod of claim 4, further comprising: generating a vector to includethe first and second program category variable values, wherein the firstand second program category variable values are respectively located ata first position and a second position in the vector.
 6. The method ofclaim 5, further comprising: including a two bit value as each of thefirst and second program category variable values respectively.
 7. Themethod of claim 6, further comprising: retrieving a second rightsobject, a third rights object and a fourth rights object, wherein thefirst, second, third and fourth rights objects form a set of rightsobjects.
 8. The method of claim 7, further comprising: determining thatat least one of the first and second program category variable valuescorresponds to one of the first, second, third and fourth rightsobjects.
 9. The method of claim 2, further comprising: including aplurality of usage rights associated with a plurality of programcategory variable values in the first rights object; and determiningthat the transmitted first program value corresponds to one of theplurality of usage rights.
 10. The method of claim 1, furthercomprising: receiving one or more new traffic keys; and repeating theencryption of the stream of data with the one or more new traffic keys.11. An apparatus comprising: at least one processor; and at least onenon-transitory memory including computer program code, wherein the atleast one non-transitory memory and the computer program code areconfigured to, with the at least one processor, cause the apparatus toperform at least the following: receive a stream of data including atleast a first portion and a second portion subject to one or more usagerights; generate at least a first traffic key and a second traffic keyin response to the receiving of the first portion and the secondportion; encrypt at least the first portion with the first traffic keyand the second portion with the second traffic key; encrypt a keystreamwith a service key into a key stream message, the keystream including atleast the first traffic key and the second traffic key; and transmit theencrypted stream of data and the key stream message, wherein the keystream message is separate from the encrypted stream of data, andwherein the encrypted stream of data includes the first portion and thesecond portion as separately encrypted.
 12. The apparatus of 11, whereinthe apparatus to further perform at least the following: transmit afirst rights object, the first rights object including the service keyfor decrypting the key stream message.
 13. The apparatus of claim 11,wherein the key stream message includes a first program categoryvariable value associated with the one or more usage rights granted by afirst rights issuer.
 14. The apparatus of claim 13, wherein the keystream message further includes a second program category variable valueassociated with the one or more usage rights granted by a second rightsissuer.
 15. The apparatus of claim 14, wherein the apparatus is furthercaused to perform at least the following: generate a vector to includethe first and second program category variable values, wherein the firstand second program category variable values are respectively located ata first position and a second position in the vector.
 16. The apparatusof claim 15, wherein the apparatus is further caused to perform at leastthe following: include a two bit value as each of the first and secondprogram category variable values respectively.
 17. The apparatus ofclaim 16, wherein the apparatus is further caused to perform at leastthe following: retrieve a second rights object, a third rights objectand a fourth rights object, wherein the first, second, third and fourthrights objects form a set of rights objects.
 18. The apparatus of claim17, wherein the apparatus is further caused to perform at least thefollowing: determine that at least one of the first and second programcategory variable values corresponds to one of the first, second, thirdand fourth rights objects.
 19. The apparatus of claim 12, wherein theapparatus is further caused to perform at least the following: include aplurality of usage rights associated with a plurality of programcategory variable values in the first rights object; and determine thatthe transmitted first program value corresponds to one of the pluralityof usage rights.
 20. The method of claim 1, wherein the encrypted streamof data and the key stream message are multiplexed and transmitted usingtime slicing.